Once an iPhone extraction exists, someone has to analyze it and produce the report a court will accept. Sherlock reads validated Cellebrite UFED (now Inseyets) and Magnet full-filesystem extractions and works the iPhone side deeply: iMessage and SMS reconstruction with an attribution timeline, WhatsApp messages carried in the encrypted backup, the photo library with EXIF and geotag artifacts, browser history, application data and on-device account metadata. Its own acquisition is a logical iPhone backup; for full-filesystem depth it reads an extraction another tool produced. It analyzes the evidence, it does not claim to out-parse the tool that acquired it.
iPhone and iPad Forensics - $599 One-Time
The iPhone Analyzer That Reads What Others Charge a Subscription For
Sherlock Forensics iPhone and iPad Analyzer takes the extraction you already have, works it deeply and hands you a court-ready report. One-time $599, no subscription, no dongle, available to any examiner.
The Sherlock Forensics iPhone and iPad Analyzer reads Cellebrite UFED (now Inseyets) and Magnet full-filesystem extractions, reconstructs iMessage, SMS and app data and from a Cellebrite full-filesystem extraction decrypts Signal and Session using the recovered keychain key. It runs a local auditable AI assistant, reads GPS and media artifacts and issues a court-ready report with SHA-256 and chain of custody, for a one-time $599 on Windows.
Reads Your Extraction
Bring the Cellebrite Image, Skip the Second Enterprise Seat
The Headline
It Decrypts Signal and Session
From a Cellebrite full-filesystem extraction, Sherlock decrypts Signal and Session messages using the recovered keychain key. Both apps keep their message stores SQLCipher-encrypted; the key lives in the on-device keychain, which a Cellebrite full-filesystem extraction makes available, so conversations from apps engineered to be unbreakable become readable in the court-ready report. That is a strong result for a $599 tool and it is scoped honestly to a Cellebrite full-filesystem extraction rather than a logical backup. Sherlock also reads Threema messages, which the app stores in a plaintext local database, in the clear. It recovers Wickr account activity (conversation structure, timestamps and read state), though Wickr message content stays end-to-end encrypted. S
Local AI
An AI Assistant That Accelerates, Never Decides
Ask answers questions about the open case by querying the same deterministic parsers, so every statement is backed by a specific reproducible record. It shows the tools it called, the arguments and the record counts, surfaces leads for the examiner to confirm and reports what it could not find, rather than drawing conclusions or identifying anyone. It runs entirely on the workstation with no cloud and no account, on a consented local model download. The angle is accessible, local and auditable: a fully local AI agent at a one-time $599 rather than gated behind an enterprise tier. It is not the only local AI in the field and does not claim to be. Image descriptions and audio transcription are AI search aids; the media itself stays the authority.
The Math
$599 One-Time, Not an Annual Subscription
The enterprise mobile suites are sold as annual subscriptions in the thousands of dollars per year. Sherlock is a one-time $599 perpetual license with no annual maintenance and no hardware dongle, available to any examiner, firm or individual. For iPhone-centric work that needs deep analysis and a court-ready report from an extraction you already have, that is the honest reason to reach for the focused analyzer: SHA-256 per-artifact hashing, chain of custody documentation and a court-ready PDF, on Windows, for a price anyone can buy.